Back Gbhackers

Microsoft Warns of Actively Exploited SharePoint Server Zero

Gbhackers •Divya • April 15, 2026

Microsoft issued an urgent security update addressing an actively exploited zero-day vulnerability in its SharePoint Server platform. The flaw, officially tracked as CVE-2026-32201, allows unauthenticated attackers to conduct network-based spoofing attacks. Because threat actors are already exploiting this weakness in the wild, system administrators must apply the available patches immediately to protect their corporate networks. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

BlueHammer Zero-Day Exploit Released, Exposing Windows Users to Privilege Escalation A security researcher, known as Chaotic Eclipse, has publicly released exploit code for a zero-day vulnerability in Windows, dubbed BlueHammer, allowing local privilege escalation to SYSTEM or elevated administrator privileges. The exploit targets a flaw in the Windows Defender update mechanism and has no available patch, leaving potentially over 1 billion Windows users vulnerable. The researcher expressed frustration with Microsoft's Security Response Center (MSRC) regarding their handling of the vulnerability disclosure process, leading to the public release of the exploit. Will Dormann, a principal vulnerability analyst, confirmed the exploit's functionality, noting that it is not entirely reliable and primarily affects local user accounts. The exploit code is available on GitHub, with significant interest from both security researchers and potential attackers. Microsoft has not yet issued a statement regarding a patch or a timeline for addressing the vulnerability. The exploit's release has raised concerns about the implications for cybersecurity, as attackers could leverage this flaw for malicious purposes. 130 sources 67

Extracted Entities

Microsoft Warns of Actively Exploited SharePoint Server Zero

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (1)